Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/BC_CdjOB6RULGEZF7J94_vrGJec.roa
File: BC_CdjOB6RULGEZF7J94_vrGJec.roa (raw, json)
Hash identifier: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=
Subject key identifier: 04:2F:C2:76:33:81:E9:15:0B:18:46:45:EC:9F:78:FE:FA:C6:25:E7
Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Certificate serial: 0195CA2E0C4B790AEED7A62249BE165F2640
Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/BC_CdjOB6RULGEZF7J94_vrGJec.roa
Signing time: Mon 24 Mar 2025 22:02:50 +0000
ROA not before: Mon 24 Mar 2025 22:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57447
IP address blocks: 185.161.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ca:2e:0c:4b:79:0a:ee:d7:a6:22:49:be:16:5f:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Validity
Not Before: Mar 24 22:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042fc2763381e9150b184645ec9f78fefac625e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:d6:bd:fd:6a:cb:26:26:0e:d6:f2:e1:6c:
27:1a:eb:79:4d:ce:c6:eb:36:fb:9e:40:98:25:63:
6c:55:42:61:f6:53:f4:81:a3:53:f5:76:16:77:45:
ca:8a:1a:d0:72:09:2a:1a:54:88:bd:29:f4:32:ca:
f8:ec:bd:fd:26:44:18:5b:2a:33:41:07:b2:b4:85:
56:0d:a2:05:d0:8d:df:dc:66:7f:e8:d2:36:39:e5:
91:96:e6:ef:d6:d6:60:ca:c8:6a:28:4d:c6:43:db:
05:5e:87:e6:89:77:cc:18:e9:59:8f:a9:51:30:74:
fa:4e:55:b8:8c:eb:a3:e0:49:38:2d:5f:52:7b:78:
fc:c3:a3:c8:b3:58:04:fc:95:dd:76:81:27:6d:1f:
91:10:3f:f7:3f:a7:6f:14:db:52:5c:4a:6e:cc:c6:
f1:1f:56:45:a7:f5:8a:bc:ea:f2:64:d2:49:c0:26:
32:2c:d9:9a:c8:33:38:49:98:ad:1f:cf:e2:45:d8:
e9:95:ee:3f:00:56:1a:1e:bf:e7:2b:82:d7:2b:6e:
9c:82:a4:ff:86:e5:70:eb:78:f7:09:e9:22:4a:b8:
23:a8:e8:68:2b:dd:a9:75:2f:a5:59:65:ef:26:70:
15:5f:93:0b:01:95:aa:7e:b9:ec:5d:b2:0d:50:28:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:C2:76:33:81:E9:15:0B:18:46:45:EC:9F:78:FE:FA:C6:25:E7
X509v3 Authority Key Identifier:
keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/BC_CdjOB6RULGEZF7J94_vrGJec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:65:06:71:53:9f:bf:69:ea:9f:e3:7a:0f:2f:4d:59:af:07:
98:86:ed:7c:29:44:3d:1c:25:5e:e4:ae:a7:25:85:83:6a:f3:
fd:65:c4:0c:c0:3d:ef:d6:f6:86:7d:1c:dd:df:96:81:31:b6:
c6:ed:53:cb:f8:a3:70:ea:8b:de:a9:25:3a:15:f2:48:04:90:
a9:05:20:39:9a:1f:23:70:dc:c2:6d:7e:5a:3a:eb:87:15:74:
a3:a6:28:cd:f8:f5:ec:3d:0f:45:c9:cc:93:12:96:10:20:68:
cf:cb:75:38:2a:1d:b8:fe:b9:43:72:ed:fe:7b:77:cf:f2:f5:
05:56:76:2f:eb:ca:4d:db:b0:64:33:64:bd:ce:fa:87:33:5d:
45:9e:76:14:21:f4:f0:d0:0a:0e:af:28:d6:c4:86:e2:d6:cf:
87:96:e6:44:09:17:90:39:84:12:44:e6:47:65:1d:81:be:21:
02:79:f7:1f:2d:00:20:8c:ed:e7:41:9a:73:78:30:17:5a:53:
c3:a9:19:33:ea:b6:ed:00:28:65:86:97:31:99:25:c0:d3:fe:
ac:58:fa:38:4e:da:2c:4e:fc:4c:c4:43:96:01:59:f2:98:2e:
20:46:66:88:1f:79:cd:3a:fe:c0:f7:e1:14:89:9d:5b:da:23:
7d:f6:3c:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXKLgxLeQru16YiSb4WXyZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjRmYjdkNmE4Y2I4N2RkOWRhMDZkNzY2YTA4MzhjZjM1
NjA0MDIwHhcNMjUwMzI0MjIwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDJmYzI3NjMzODFlOTE1MGIxODQ2NDVlYzlmNzhmZWZhYzYyNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2TWvf1qyyYmDtby4WwnGut5Tc7G
6zb7nkCYJWNsVUJh9lP0gaNT9XYWd0XKihrQcgkqGlSIvSn0Msr47L39JkQYWyoz
QQeytIVWDaIF0I3f3GZ/6NI2OeWRlubv1tZgyshqKE3GQ9sFXofmiXfMGOlZj6lR
MHT6TlW4jOuj4Ek4LV9Se3j8w6PIs1gE/JXddoEnbR+RED/3P6dvFNtSXEpuzMbx
H1ZFp/WKvOryZNJJwCYyLNmayDM4SZitH8/iRdjple4/AFYaHr/nK4LXK26cgqT/
huVw63j3CekiSrgjqOhoK92pdS+lWWXvJnAVX5MLAZWqfrnsXbINUCjSZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQvwnYzgekVCxhGReyfeP76xiXnMB8GA1UdIwQY
MBaAFDT0+31qjLh92doG12agg4zzVgQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAt
YWUzNTViMmFlNmVmLzEvQkNfQ2RqT0I2UlVMR0VaRjdKOTRfdnJHSmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAtYWUzNTViMmFlNmVm
LzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaF6MA0G
CSqGSIb3DQEBCwUAA4IBAQAeZQZxU5+/aeqf43oPL01ZrweYhu18KUQ9HCVe5K6n
JYWDavP9ZcQMwD3v1vaGfRzd35aBMbbG7VPL+KNw6oveqSU6FfJIBJCpBSA5mh8j
cNzCbX5aOuuHFXSjpijN+PXsPQ9FycyTEpYQIGjPy3U4Kh24/rlDcu3+e3fP8vUF
VnYv68pN27BkM2S9zvqHM11FnnYUIfTw0AoOryjWxIbi1s+HluZECReQOYQSROZH
ZR2BviECefcfLQAgjO3nQZpzeDAXWlPDqRkz6rbtAChlhpcxmSXA0/6sWPo4Ttos
TvxMxEOWAVnymC4gRmaIH3nNOv7A9+EUiZ1b2iN99jxs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net